Can an Exchange server receive emails from an upstream mail scanner if the Exchange services aren't started?

vianceadmin
vianceadmin used Ask the Experts™
on
Trying to track down some emails.  Our mail scanners are saying that they were processing emails and sending them to the exchange server (scanner logs say that they were successully delivered to the email server) but the Exchange services weren't started (We lost power and Exchange server came up after AD servers so Exchange services didn't start).  Rebooted the Exchange server and services started but I'm just trying to track down those emails that were sent to the Exchange server during that time (when Exchange services weren't started).  Thanks in advance...Using Exchange 2003 and mail scanners are Symantec Messaging Gateway scanners...
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®

Author

Commented:
Also looked in the queue in D:\Exchsrvr\Mailroot\vsi 1\Queue but nothing there...
Principal Consultant
Commented:
If the Exchange services were not started Exchange cannot accept mail.  You'd think Symantec would Queue the mail in that case.  If it did not, and it just relayed them without verifying that they were accepted by the Exchange server, they are probably lost.

Author

Commented:
According to the Symantec scanner logs, it says that it was delivered to ipaddress:25

Could the SMTP service have been started so it could receive the email but Exchange services not started?
Success in ‘20 With a Profitable Pricing Strategy

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Larry LarmeuPrincipal Consultant

Commented:
That is possible - I assumed when you said the Exchange servers were down that SMTP was down.  If that is what happened when Exchange restarted the queue should process immediately and deliver.

Author

Commented:
Not sure.  I just know that the Information Store (and I assume the other Exchange services) wasn't started.  I'm looking in the Message Tracking Center and I don't see the email to this user (I see emails once the server was rebooted and the Exchange services were back online).  Anywhere else to look?  Is there a way to see if the Exchange server received the email from the scanner?  IIS logs?

Commented:
As long as the Simple Mail Transfer Protocol service is running, the server will accept mail, but if the information store service is down, the mail should queue locally until its timeout period runs out.

http://technet.microsoft.com/en-us/library/aa996068(v=exchg.65).aspx
If 2007 or later the items may be in the HUB server queue.

Author

Commented:
So it sounds like the SMTP service was running (since Symantec was able to successfully connect to ipaddress:25) but if that's the case, where would the emails queue up until the exchange services are started?

Author

Commented:
Are there any log files that would show me anything during that time (Exchange services stopped but SMTP service running and accepting emails)?
Message tracking on the HUB logs would show the mail traffic

Author

Commented:
Exchange 2003 so no HUB server...
Try your MTA queues.

Author

Commented:
Nothing in the MTA queues either...
Run up perfmon and add any MTA queues or SMTP queue values (queue length).
It has to be somewhere, unless the message expiry time has passed. (common value is 48 hours)

Author

Commented:
I've requested that this question be deleted for the following reason:

Please Delete.

Commented:
Was the problem resolved in some way?

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial